Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/VPMX9a3pttq47Y1HrXLgmuloRHI.roa
File:                     VPMX9a3pttq47Y1HrXLgmuloRHI.roa (raw, json)
Hash identifier:          jdxgepDzzzLqtIh1ifRj0Jsd3eLuLEfm5EClq3IMw5o=
Subject key identifier:   54:F3:17:F5:AD:E9:B6:DA:B8:ED:8D:47:AD:72:E0:9A:E9:68:44:72
Certificate issuer:       /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial:       0196C47D086F725E2F699EE7BB519DD72F9A
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/VPMX9a3pttq47Y1HrXLgmuloRHI.roa
Signing time:             Mon 12 May 2025 12:34:10 +0000
ROA not before:           Mon 12 May 2025 12:34:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3170
IP address blocks:        83.97.16.0/22 maxlen: 24
                          83.97.16.0/24 maxlen: 32
                          91.240.224.0/24 maxlen: 24
                          185.17.196.0/22 maxlen: 24
                          185.175.90.0/24 maxlen: 24
                          188.64.34.0/23 maxlen: 24
                          188.64.36.0/22 maxlen: 24
                          193.35.56.0/22 maxlen: 24
                          193.105.188.0/24 maxlen: 24
                          194.69.165.0/24 maxlen: 24
                          195.74.52.0/22 maxlen: 24
                          195.144.8.0/24 maxlen: 24
                          195.191.218.0/23 maxlen: 24
                          2a03:ee40::/32 maxlen: 32
                          2a07:240::/29 maxlen: 48
                          2a10:4740::/29 maxlen: 48
                          2a11:2640::/32 maxlen: 32
                          2a11:2641::/32 maxlen: 32
                          2a11:2647::/32 maxlen: 32
Validation:               Failed, certificate revoked on Mon 12 May 2025 16:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:7d:08:6f:72:5e:2f:69:9e:e7:bb:51:9d:d7:2f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
        Validity
            Not Before: May 12 12:34:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=54f317f5ade9b6dab8ed8d47ad72e09ae9684472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:66:b3:ba:26:d8:f6:d6:b2:81:82:0f:b6:
                    1e:14:d5:e3:fd:d3:a3:17:f6:0d:19:8c:d0:a7:7a:
                    46:80:62:5b:5f:a7:44:0a:3c:56:75:4d:b9:12:fc:
                    5a:9c:c5:36:ce:b4:33:e5:1f:24:6c:18:f6:49:f0:
                    33:e2:77:e0:55:a4:7a:ce:2f:8a:77:fe:e3:2b:13:
                    82:b1:22:89:1c:cd:97:e9:c5:69:bf:92:25:04:7b:
                    8a:09:a9:1e:19:cd:f4:8f:66:d0:2d:91:c5:b7:33:
                    15:66:7c:de:ca:78:78:70:1a:3d:ac:49:fb:9d:a7:
                    a5:c2:2c:96:1a:60:0e:04:6a:54:99:d7:ee:6f:fe:
                    3d:79:05:e7:84:a0:5f:43:89:91:f1:ce:30:4b:f2:
                    39:93:33:d2:8a:0e:0b:5a:7a:56:33:53:69:67:db:
                    da:dd:e6:52:84:8f:b2:ea:15:55:37:81:b3:bf:f5:
                    fa:f5:5e:ee:6c:cd:81:62:9f:77:8b:7c:5f:1c:5b:
                    25:b3:91:fc:81:03:1e:73:36:e5:35:24:03:f3:55:
                    4f:13:c2:77:2b:37:25:28:3e:3d:9e:4c:22:bc:7c:
                    ba:62:dd:15:ca:fa:74:b0:97:ba:83:1b:d5:9f:0b:
                    c2:4c:a5:c4:30:4b:40:51:09:7a:f8:50:3b:a3:21:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F3:17:F5:AD:E9:B6:DA:B8:ED:8D:47:AD:72:E0:9A:E9:68:44:72
            X509v3 Authority Key Identifier:
                keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/VPMX9a3pttq47Y1HrXLgmuloRHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.97.16.0/22
                  91.240.224.0/24
                  185.17.196.0/22
                  185.175.90.0/24
                  188.64.34.0-188.64.39.255
                  193.35.56.0/22
                  193.105.188.0/24
                  194.69.165.0/24
                  195.74.52.0/22
                  195.144.8.0/24
                  195.191.218.0/23
                IPv6:
                  2a03:ee40::/32
                  2a07:240::/29
                  2a10:4740::/29
                  2a11:2640::/31
                  2a11:2647::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:84:49:36:7d:90:57:e8:c0:0c:24:4d:29:e5:4f:4a:e7:a4:
         b4:c3:86:86:60:51:17:8a:2c:f8:fb:58:15:58:9c:84:ba:05:
         13:c4:c7:0f:8c:2f:79:75:06:b6:fd:fc:25:16:9e:0c:b3:7a:
         aa:b3:71:b6:3d:18:dc:66:9e:6e:d7:71:56:7f:32:15:9b:cf:
         4f:d8:b2:75:89:76:4e:e0:53:0a:c6:0a:a8:75:28:6b:93:ea:
         a9:ba:f6:c8:5a:c1:46:d7:e2:52:21:f0:be:7a:da:d4:16:d6:
         04:33:db:8b:d5:46:31:84:0d:07:45:7e:2a:c1:7d:e4:0a:fd:
         4f:a6:ee:5c:b3:4a:64:d2:74:b5:6a:51:e2:3e:50:35:ee:2c:
         21:bd:be:10:b0:87:2c:7d:4b:42:61:3b:d8:02:1c:09:c1:68:
         d1:38:78:ec:1f:79:67:e3:62:a5:08:fc:99:47:94:f0:99:42:
         86:dc:88:af:f8:75:b6:a1:c8:7d:e0:a1:05:51:39:70:5e:2b:
         6c:4a:93:82:9f:e9:bd:4c:43:3b:11:ee:3e:d9:87:64:c9:34:
         13:7e:07:25:b6:75:e1:84:ba:06:ef:7c:c5:0b:2b:74:72:db:
         b0:42:16:9b:bd:60:b2:09:c4:9c:8a:dc:d2:ed:58:78:b7:01:
         27:72:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:03:31 2025 by rpki-client